Patch PHP Path Traversal vulnerability

patch-code-sample-path-traversal.php

<?php

  $allowed_subpage = array('dashboard', 'profile', 'settings');

  if ( Input::has( 'sub_page' ) ) {
  $sub_page = Input::get( 'sub_page' );
          if ( in_array( $sub_page, $allowed, true ) ) {
                  include_once tutor()->path . "views/pages/{$sub_page}.php";
                 return;
          }
  }